Analysis

  • max time kernel
    151s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    21/11/2022, 13:12

General

  • Target

    ObjednávkaPOR05 B005-V0211Patrem s.r.o.exe

  • Size

    118KB

  • MD5

    8e6261a5391f3dec6c1e1218b0f09ae6

  • SHA1

    8e797f77f0c9b000b17f58196acc33fb4ca11de9

  • SHA256

    5602ea742465b0f9f85504779ade24837367a9af71434668a8c8ac5ebecaf402

  • SHA512

    bc2891889df278c38793e138ac614da658a473c5953e2357c9c884d357dbb6bfe38486f535af1752048339fe4a29f4b25ebf4dc034893a3732a2c2096898cd70

  • SSDEEP

    768:Fn5zXdQJrxHSqHXz7vtk+nEox1usPC7aZofhb6D2GLKPWdNduyo7p+:7XeN0q33vtk+R42Aau5mv2WdNduykI

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ObjednávkaPOR05 B005-V0211Patrem s.r.o.exe
    "C:\Users\Admin\AppData\Local\Temp\ObjednávkaPOR05 B005-V0211Patrem s.r.o.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/868-54-0x0000000000D90000-0x0000000000DB4000-memory.dmp

    Filesize

    144KB

  • memory/868-55-0x00000000002F0000-0x00000000002F8000-memory.dmp

    Filesize

    32KB

  • memory/868-56-0x0000000075E61000-0x0000000075E63000-memory.dmp

    Filesize

    8KB